Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
File: QwTYaLC50dQ2eOtGeufD-jv_4vg.mft (raw, json)
Hash identifier: z8/wTAqwuE227dOayR0/ruJN01zri0lDQnVeX1uRd88=
Subject key identifier: B3:6D:B1:91:1B:3E:A6:75:D8:65:DC:65:A1:AD:D3:84:50:32:51:59
Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
Certificate issuer: /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Certificate serial: 0198D73B2A5C650E9A10B6604FBB5291CE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
Manifest number: 0CF4
Signing time: Sat 23 Aug 2025 14:00:35 +0000
Manifest this update: Sat 23 Aug 2025 14:00:35 +0000
Manifest next update: Sun 24 Aug 2025 14:00:35 +0000
Files and hashes: 1: 0sfAJDOKEgD2Tzsu1RWmyLUySdU.roa (hash: VH3wSYokwNKbdRdlo/plfnhiJKHB8F9C3/JbEz05f7k=)
2: QwTYaLC50dQ2eOtGeufD-jv_4vg.crl (hash: z81SX2Zc/wYaubiv4K1dXex8uJvZXtzdVvUSCKdAwuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:2a:5c:65:0e:9a:10:b6:60:4f:bb:52:91:ce:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Validity
Not Before: Aug 23 14:00:35 2025 GMT
Not After : Aug 24 14:00:35 2025 GMT
Subject: CN=b36db1911b3ea675d865dc65a1add38450325159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:27:44:a2:88:71:8e:f7:1c:60:6a:38:ab:
17:92:15:96:95:9e:87:0d:e4:e8:c8:87:93:43:11:
cd:1c:32:c1:81:85:5b:91:57:ff:81:9c:76:42:c9:
a1:15:42:fe:7f:aa:b6:3b:a4:e8:f9:ae:40:13:fb:
9e:6c:16:f9:20:1e:0a:c6:6f:5f:6a:82:b1:0d:89:
84:40:3b:b7:bf:0d:9c:2a:b2:9b:68:c1:d6:fa:22:
b5:be:b7:fa:d0:36:de:45:de:f2:ca:84:ec:f6:91:
39:bf:6a:62:10:d1:52:bb:08:4f:e4:f1:48:59:a7:
b1:99:10:2e:0a:4b:0f:07:a3:2e:33:e7:2e:de:61:
98:4f:24:73:21:43:f5:95:54:4a:a9:5f:74:f0:fa:
e8:1c:9e:27:c2:a5:fe:b2:e9:49:16:81:ef:72:00:
4f:23:fd:cf:13:7f:31:c4:97:9e:61:82:0d:fc:a8:
2a:dd:8f:59:a3:8a:22:96:ee:98:76:52:e2:92:55:
f6:f5:3f:0b:13:4f:24:18:b2:88:a2:80:14:71:b3:
93:71:49:a3:53:50:d3:7e:14:54:fb:8e:0f:19:74:
60:49:c0:1d:40:32:ac:bc:3f:22:42:c5:37:94:64:
64:56:ce:d1:49:87:81:73:97:b3:b5:47:ef:9d:9a:
da:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6D:B1:91:1B:3E:A6:75:D8:65:DC:65:A1:AD:D3:84:50:32:51:59
X509v3 Authority Key Identifier:
keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b9:12:01:8c:bf:2a:01:04:c4:5c:0e:e8:c3:ec:48:cd:bf:
b4:70:b1:39:3b:cf:d3:56:07:64:c2:fe:92:3b:e0:3a:1e:a2:
1c:55:78:70:b4:de:53:bb:35:6d:d2:90:74:67:27:0f:f1:2c:
65:26:0f:33:76:05:ba:15:09:7f:08:b8:ae:a3:a9:6e:f6:aa:
0a:5f:9f:ba:18:87:63:05:3a:05:bf:e9:d3:e9:f0:8d:6d:98:
e5:c8:73:81:33:5c:4f:b3:07:8a:38:75:79:c9:cb:c4:43:44:
73:5a:c2:0a:78:f0:ce:97:88:8d:e3:d4:e6:74:96:8b:9e:23:
a5:bd:9f:e7:b2:3c:b5:eb:2e:0e:55:03:b8:28:46:5f:b6:9c:
91:c2:6b:f3:00:23:7b:ca:1e:8c:3e:c7:16:22:3e:3d:de:92:
b3:52:48:52:20:99:54:3d:c7:f1:14:64:82:ec:4b:f8:33:8f:
b9:1e:d4:57:e1:dd:33:61:ff:18:25:ab:06:8e:1d:08:db:31:
c2:75:64:3f:32:83:e4:d0:62:6f:f4:bb:1f:61:0c:47:a9:83:
f9:7b:a2:77:6d:a3:2b:11:51:77:27:7a:56:7b:f1:a0:c9:4d:
2d:78:3b:13:e5:6e:18:03:05:a3:a2:ba:cb:43:e1:f5:4f:23:
79:56:8a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:20:41 2025 by rpki-client